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Introduction 


In smart contracts, we will need methods to handle cryptographic attestations to a 
users identifier or abilities. Let's say we have a real estate agent, KiwiRealtors, that 
provides an “expression of interest” function though a smart contract and requires the 
users to provide an attestation that they are a resident of New Zealand or Australia, 
as a legal requirement. This has actually happened in the New Zealand property 
market and it is the perfect example of a need to handle such attestations. 


However, it is not practical for a smart contract to explicitly trust an attestation issuer. 
There are multiple issuers who can provide an attestation to a person's residency - a 
local Justice of the Peace, the land title office, local police, passport authority etc. We 
envision a model where the effort to manage the list of qualified issuers is practically 
outsourced to a list. 


Anyone can publish a list of issuers. Only the most trusted and carefully maintained 
lists gets popular use. 


Purpose 


This ERC provides a smart contract interface for anyone to manage a list of 
attestation issuers. A smart contract would explicitly trust a list, and therefore all 
attestations issued by the issuers on the list. 


Draft implementation 
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/* The purpose of this contract is to manage the List of attestation 
* issuer contracts and their capacity to fulfill requirements 
17 
contract ManagedListERC 
{ 
/* a manager is the steward of a List. OnLy he/she/it can change the 
* List by removing/adding attestation issuers to the List. 


* An issuer in the List is represented by their contract 
* addresses, not by the attestation signing keys managed by such a 
* contract. 


*/ 
struct List 
{ 
string name; 
string description; // short description of what the List entails 
string capacity; // serves as a filter for the attestation signing key 
/* if a smart contract specifies a List, only attestation issued 
* by issuers on that List is accepted. Furthermore, if that 
* List has a non-empty capacity, only attestations signed by a 
* signing key with that capacity is accepted. */ 
address[] issuerContracts; // all these addresses are contracts, no sigr 
uint expiry; 
} 


// find which List the sender is managing, then add an issuer to it 
function addIssuer(address issuerContractAddress) public; 


//return false if the List identified by the sender doesn't have this issuer i 
function removeIssuer(address issuerContractAddress, List listToRemoveIssuerFr 


/* called by services, e.g. Kiwi Properties or James Squire */ 
/* Loop through all issuer's contract and execute validateKey() on 

* every one of them in the hope of getting a hit, return the 

* contract address of the first hit. Note that there is an attack 

* method for one issuer to claim to own the key of another which 

* is mitigated by Later design. */ 

//Loop through the issuers array, calling validate on the signingKeyOfAttestc 
function getIssuerCorrespondingToAttestationKey(bytes32 list_id, address signi 


/* for simplicity we use sender's address as the List ID, 
* accepting these consequences: a) if one user wish to maintain 
* several Lists with different capacity, he or she must use a 
* different sender address for each. b) if the user replaced the 
* sender's key, either because he or she suspects the key is 
* compromised or that it is Lost and reset through special means, 
* then the List is still identified by the first sender's 
* address. 
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*/ 


function createList(List list) public; 


/* replace List manager's key with the new key */ 
function replaceListIndex(List list, address manager) public returns(bool) ; 


Click here to see an example implementation of this ERC 


Related ERC’s 
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